CVE-2021-46667
Moderate
CVE-2021-46667
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Exploit probability
0.4%
Published
February 1, 2022
Required by
Not available
Last source change
July 9, 2026
02 / AFFECTED SOFTWARE
Affected packages
72 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2021-46667
View original source
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Open Source Vulnerabilities
BIT-mariadb-min-2021-46667
View original source
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Open Source Vulnerabilities
BIT-mysql-client-2021-46667
View original source
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Open Source Vulnerabilities
BIT-mariadb-2021-46667
View original source
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
05 / REFERENCES
Further evidence
- https://jira.mariadb.org/browse/MDEV-26350
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/
- https://mariadb.com/kb/en/security/
- https://security.netapp.com/advisory/ntap-20220221-0002/
- https://nvd.nist.gov/vuln/detail/CVE-2021-46667